pentester.land· Apr 11, 2023· by sigabrt9 (@sigabrt9)🔍 CVE-2023-28879

Shell in the Ghost: Ghostscript CVE-2023-28879 writeup

Open Original Article ↗
Target Program: Artifex Ghostscript
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#Buffer Overflow#Memory corruption#RCE#CVE-2023-28879

More Writeups Like This

pentester.land

4 exploits, 1 bug: exploiting cve-2024-20017 4 different ways

by hyper (@hyprdude)
pentester.land

17 vulnerabilities in Sharp Multi-Function Printers

by Pierre Kim (@PierreKimSec)
pentester.land

Iconv, Set The Charset To RCE: Exploiting The Glibc To Hack The PHP Engine (Part 2)

by Charles Fol (@cfreal_)
pentester.land

Iconv, Set The Charset To RCE: Exploiting The Glibc To Hack The PHP Engine (Part 1)

by Charles Fol (@cfreal_)